Ubuntu notice USN-8998-1 covers a Squid flaw in HTTP Transfer-Encoding handling
VULNERABILITYSquidredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Ubuntu notice USN-8998-1 reports improper handling of certain HTTP Transfer-Encoding headers in Squid, which may enable HTTP request smuggling, security control bypass, and web cache poisoning. The article gives no CVE identifier, CVSS score, affected package versions or fixed versions. Defenders should check for Squid deployments, including reverse proxy and caching roles, and apply the fixed packages from the Ubuntu notice once they confirm the versions.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether Squid is installed on your Ubuntu systems and where it sits in front of web services.
- Apply the fixed Squid package from the Ubuntu security notice USN-8998-1 once you have confirmed the affected version.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Wed 4 NovemberUSN-8998-1: Squid vulnerabilityUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices